Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 04:59:34.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52470 1 109 1 2025-10-19 04:59:34.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51448 1 80 1 2025-10-19 04:59:34.524 00:00:00.000 UDP 28.104.0.1:51448 -> 198.28.0.2:53 1 64 1 2025-10-19 04:59:34.524 00:00:00.000 UDP 28.104.0.1:52470 -> 198.28.0.2:53 1 64 1 2025-10-19 04:59:43.525 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 04:54:53.486 00:05:51.063 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 04:59:53.546 00:00:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:00:34.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56122 1 80 1 2025-10-19 05:00:34.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53776 1 109 1 2025-10-19 05:00:34.782 00:00:00.000 UDP 28.104.0.1:56122 -> 198.28.0.2:53 1 64 1 2025-10-19 05:00:34.782 00:00:00.000 UDP 28.104.0.1:53776 -> 198.28.0.2:53 1 64 1 2025-10-19 04:55:53.554 00:05:50.944 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 04:57:23.781 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2648 1 2025-10-19 05:01:35.096 00:00:00.000 UDP 28.104.0.1:49226 -> 198.28.0.2:53 1 64 1 2025-10-19 05:01:35.096 00:00:00.000 UDP 28.104.0.1:45537 -> 198.28.0.2:53 1 64 1 2025-10-19 05:01:35.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45537 1 109 1 2025-10-19 05:01:35.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49226 1 80 1 2025-10-19 04:56:53.498 00:05:51.001 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 04:59:53.336 00:02:00.211 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:00:53.547 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:02:35.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43358 1 109 1 2025-10-19 05:02:35.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46964 1 80 1 2025-10-19 05:02:35.350 00:00:00.000 UDP 28.104.0.1:46964 -> 198.28.0.2:53 1 64 1 2025-10-19 05:02:35.350 00:00:00.000 UDP 28.104.0.1:43358 -> 198.28.0.2:53 1 64 1 2025-10-19 05:03:35.659 00:00:00.000 UDP 28.104.0.1:36664 -> 198.28.0.2:53 1 64 1 2025-10-19 05:03:35.659 00:00:00.000 UDP 28.104.0.1:53768 -> 198.28.0.2:53 1 64 1 2025-10-19 05:03:35.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53768 1 80 1 2025-10-19 05:03:35.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36664 1 109 1 2025-10-19 05:02:53.548 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:02:53.340 00:01:00.208 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:04:35.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55811 1 80 1 2025-10-19 05:04:35.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39902 1 109 1 2025-10-19 05:04:35.949 00:00:00.000 UDP 28.104.0.1:55811 -> 198.28.0.2:53 1 64 1 2025-10-19 05:04:35.949 00:00:00.000 UDP 28.104.0.1:39902 -> 198.28.0.2:53 1 64 1 2025-10-19 05:04:43.605 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 04:59:53.545 00:05:50.964 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:04:53.548 00:00:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:05:36.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45982 1 109 1 2025-10-19 05:05:36.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36878 1 80 1 2025-10-19 05:05:36.599 00:00:00.000 UDP 28.104.0.1:45982 -> 198.28.0.2:53 1 64 1 2025-10-19 05:05:36.599 00:00:00.000 UDP 28.104.0.1:36878 -> 198.28.0.2:53 1 64 1 2025-10-19 05:00:53.489 00:05:51.062 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:06:36.905 00:00:00.000 UDP 28.104.0.1:53442 -> 198.28.0.2:53 1 64 1 2025-10-19 05:06:36.905 00:00:00.000 UDP 28.104.0.1:53943 -> 198.28.0.2:53 1 64 1 2025-10-19 05:06:36.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53442 1 109 1 2025-10-19 05:06:36.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53943 1 80 1 2025-10-19 05:01:53.557 00:05:50.943 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:05:53.548 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:04:53.339 00:02:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:02:43.789 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2692 1 2025-10-19 05:07:37.213 00:00:00.000 UDP 28.104.0.1:41098 -> 198.28.0.2:53 1 64 1 2025-10-19 05:07:37.213 00:00:00.000 UDP 28.104.0.1:39846 -> 198.28.0.2:53 1 64 1 2025-10-19 05:07:37.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41098 1 109 1 2025-10-19 05:07:37.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39846 1 80 1 2025-10-19 05:02:53.499 00:05:51.001 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:08:37.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39729 1 80 1 2025-10-19 05:08:37.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44856 1 109 1 2025-10-19 05:08:37.515 00:00:00.000 UDP 28.104.0.1:44856 -> 198.28.0.2:53 1 64 1 2025-10-19 05:08:37.514 00:00:00.000 UDP 28.104.0.1:39729 -> 198.28.0.2:53 1 64 1 2025-10-19 05:07:53.549 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:07:53.342 00:01:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:09:37.821 00:00:00.000 UDP 28.104.0.1:56719 -> 198.28.0.2:53 1 64 1 2025-10-19 05:09:37.821 00:00:00.000 UDP 28.104.0.1:48727 -> 198.28.0.2:53 1 64 1 2025-10-19 05:09:37.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48727 1 80 1 2025-10-19 05:09:37.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56719 1 109 1 2025-10-19 05:09:43.727 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:09:53.549 00:00:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:10:38.161 00:00:00.000 UDP 28.104.0.1:60234 -> 198.28.0.2:53 1 64 1 2025-10-19 05:10:38.161 00:00:00.000 UDP 28.104.0.1:54112 -> 198.28.0.2:53 1 64 1 2025-10-19 05:10:38.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54112 1 80 1 2025-10-19 05:10:38.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60234 1 109 1 2025-10-19 05:05:53.548 00:05:50.963 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:11:38.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54606 1 80 1 2025-10-19 05:11:38.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46978 1 109 1 2025-10-19 05:11:38.459 00:00:00.000 UDP 28.104.0.1:46978 -> 198.28.0.2:53 1 64 1 2025-10-19 05:11:38.459 00:00:00.000 UDP 28.104.0.1:54606 -> 198.28.0.2:53 1 64 1 2025-10-19 05:06:53.489 00:05:51.062 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:09:53.343 00:02:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:10:53.550 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:08:03.795 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-19 05:12:38.748 00:00:00.000 UDP 28.104.0.1:54693 -> 198.28.0.2:53 1 64 1 2025-10-19 05:12:38.748 00:00:00.000 UDP 28.104.0.1:42243 -> 198.28.0.2:53 1 64 1 2025-10-19 05:12:38.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42243 1 80 1 2025-10-19 05:12:38.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54693 1 109 1 2025-10-19 05:07:53.559 00:05:50.942 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:13:39.054 00:00:00.000 UDP 28.104.0.1:44812 -> 198.28.0.2:53 1 64 1 2025-10-19 05:13:39.054 00:00:00.000 UDP 28.104.0.1:41102 -> 198.28.0.2:53 1 64 1 2025-10-19 05:13:39.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41102 1 80 1 2025-10-19 05:13:39.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44812 1 109 1 2025-10-19 05:08:53.499 00:05:51.003 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:12:53.549 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:12:53.343 00:01:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:14:39.352 00:00:00.000 UDP 28.104.0.1:41606 -> 198.28.0.2:53 1 64 1 2025-10-19 05:14:39.352 00:00:00.000 UDP 28.104.0.1:40035 -> 198.28.0.2:53 1 64 1 2025-10-19 05:14:39.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40035 1 80 1 2025-10-19 05:14:39.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41606 1 109 1 2025-10-19 05:14:43.850 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:14:53.552 00:00:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:15:39.644 00:00:00.000 UDP 28.104.0.1:35576 -> 198.28.0.2:53 1 64 1 2025-10-19 05:15:39.644 00:00:00.000 UDP 28.104.0.1:38718 -> 198.28.0.2:53 1 64 1 2025-10-19 05:15:39.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35576 1 109 1 2025-10-19 05:15:39.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38718 1 80 1 2025-10-19 05:16:39.939 00:00:00.000 UDP 28.104.0.1:56009 -> 198.28.0.2:53 1 64 1 2025-10-19 05:16:39.939 00:00:00.000 UDP 28.104.0.1:50816 -> 198.28.0.2:53 1 64 1 2025-10-19 05:16:39.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50816 1 109 1 2025-10-19 05:16:39.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56009 1 80 1 2025-10-19 05:11:53.549 00:05:50.964 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:15:53.551 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:13:23.799 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2660 1 2025-10-19 05:17:40.234 00:00:00.000 UDP 28.104.0.1:39450 -> 198.28.0.2:53 1 64 1 2025-10-19 05:17:40.234 00:00:00.000 UDP 28.104.0.1:43269 -> 198.28.0.2:53 1 64 1 2025-10-19 05:17:40.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43269 1 109 1 2025-10-19 05:17:40.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39450 1 80 1 2025-10-19 05:12:53.489 00:05:51.065 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:18:40.528 00:00:00.000 UDP 28.104.0.1:56785 -> 198.28.0.2:53 1 64 1 2025-10-19 05:18:40.528 00:00:00.000 UDP 28.104.0.1:46541 -> 198.28.0.2:53 1 64 1 2025-10-19 05:18:40.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56785 1 80 1 2025-10-19 05:18:40.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46541 1 109 1 2025-10-19 05:13:53.561 00:05:50.942 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:14:53.344 00:04:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 05:17:53.555 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:19:41.126 00:00:00.000 UDP 28.104.0.1:54865 -> 198.28.0.2:53 1 64 1 2025-10-19 05:19:41.126 00:00:00.000 UDP 28.104.0.1:43616 -> 198.28.0.2:53 1 64 1 2025-10-19 05:19:43.821 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:19:41.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54865 1 109 1 2025-10-19 05:19:41.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43616 1 80 1 2025-10-19 05:14:53.500 00:05:51.004 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:20:41.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55033 1 109 1 2025-10-19 05:20:41.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42500 1 80 1 2025-10-19 05:20:41.418 00:00:00.000 UDP 28.104.0.1:42500 -> 198.28.0.2:53 1 64 1 2025-10-19 05:20:41.418 00:00:00.000 UDP 28.104.0.1:55033 -> 198.28.0.2:53 1 64 1 2025-10-19 05:21:41.714 00:00:00.000 UDP 28.104.0.1:57138 -> 198.28.0.2:53 1 64 1 2025-10-19 05:21:41.714 00:00:00.000 UDP 28.104.0.1:58290 -> 198.28.0.2:53 1 64 1 2025-10-19 05:21:41.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57138 1 80 1 2025-10-19 05:21:41.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58290 1 109 1 2025-10-19 05:19:53.555 00:02:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 05:22:42.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60027 1 80 1 2025-10-19 05:22:42.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52617 1 109 1 2025-10-19 05:22:42.099 00:00:00.000 UDP 28.104.0.1:52617 -> 198.28.0.2:53 1 64 1 2025-10-19 05:22:42.099 00:00:00.000 UDP 28.104.0.1:60027 -> 198.28.0.2:53 1 64 1 2025-10-19 05:17:53.554 00:05:50.968 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:18:43.803 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2384 1 2025-10-19 05:23:42.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59714 1 80 1 2025-10-19 05:23:42.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57075 1 109 1 2025-10-19 05:23:42.402 00:00:00.000 UDP 28.104.0.1:59714 -> 198.28.0.2:53 1 64 1 2025-10-19 05:23:42.402 00:00:00.000 UDP 28.104.0.1:57075 -> 198.28.0.2:53 1 64 1 2025-10-19 05:18:53.490 00:05:51.074 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:22:53.555 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:19:53.343 00:04:00.212 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 05:24:42.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46402 1 80 1 2025-10-19 05:24:42.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52272 1 109 1 2025-10-19 05:24:42.695 00:00:00.000 UDP 28.104.0.1:46402 -> 198.28.0.2:53 1 64 1 2025-10-19 05:24:42.695 00:00:00.000 UDP 28.104.0.1:52272 -> 198.28.0.2:53 1 64 1 2025-10-19 05:24:43.987 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:19:53.564 00:05:50.947 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:25:43.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33591 1 109 1 2025-10-19 05:25:43.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58516 1 80 1 2025-10-19 05:25:42.996 00:00:00.000 UDP 28.104.0.1:33591 -> 198.28.0.2:53 1 64 1 2025-10-19 05:25:42.996 00:00:00.000 UDP 28.104.0.1:58516 -> 198.28.0.2:53 1 64 1 2025-10-19 05:20:53.502 00:05:51.009 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:24:53.346 00:01:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:26:43.269 00:00:00.000 UDP 28.104.0.1:35483 -> 198.28.0.2:53 1 64 1 2025-10-19 05:26:43.269 00:00:00.000 UDP 28.104.0.1:58410 -> 198.28.0.2:53 1 64 1 2025-10-19 05:26:43.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58410 1 80 1 2025-10-19 05:26:43.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35483 1 109 1 2025-10-19 05:24:53.556 00:02:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 05:27:43.714 00:00:00.000 UDP 28.104.0.1:44241 -> 198.28.0.2:53 1 64 1 2025-10-19 05:27:43.714 00:00:00.000 UDP 28.104.0.1:34103 -> 198.28.0.2:53 1 64 1 2025-10-19 05:27:43.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34103 1 109 1 2025-10-19 05:27:43.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44241 1 80 1 2025-10-19 05:24:03.808 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-10-19 05:28:43.997 00:00:00.000 UDP 28.104.0.1:60492 -> 198.28.0.2:53 1 64 1 2025-10-19 05:28:43.997 00:00:00.000 UDP 28.104.0.1:57991 -> 198.28.0.2:53 1 64 1 2025-10-19 05:28:44.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57991 1 109 1 2025-10-19 05:28:44.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60492 1 80 1 2025-10-19 05:23:53.555 00:05:50.967 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:27:53.556 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:26:53.346 00:02:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:29:43.973 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:29:44.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35343 1 80 1 2025-10-19 05:29:44.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49373 1 109 1 2025-10-19 05:29:44.298 00:00:00.000 UDP 28.104.0.1:35343 -> 198.28.0.2:53 1 64 1 2025-10-19 05:24:53.493 00:05:51.070 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:29:44.298 00:00:00.000 UDP 28.104.0.1:49373 -> 198.28.0.2:53 1 64 1 2025-10-19 05:30:44.588 00:00:00.000 UDP 28.104.0.1:53067 -> 198.28.0.2:53 1 64 1 2025-10-19 05:30:44.588 00:00:00.000 UDP 28.104.0.1:33103 -> 198.28.0.2:53 1 64 1 2025-10-19 05:25:53.566 00:05:50.947 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:30:44.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33103 1 80 1 2025-10-19 05:30:44.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53067 1 109 1 2025-10-19 05:29:53.557 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:29:53.347 00:01:00.212 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:31:44.884 00:00:00.000 UDP 28.104.0.1:45900 -> 198.28.0.2:53 1 64 1 2025-10-19 05:31:44.884 00:00:00.000 UDP 28.104.0.1:35990 -> 198.28.0.2:53 1 64 1 2025-10-19 05:31:44.895 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45900 1 80 1 2025-10-19 05:26:53.502 00:05:51.011 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:31:44.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35990 1 109 1 2025-10-19 05:31:53.559 00:00:00.061 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:32:45.575 00:00:00.000 UDP 28.104.0.1:50480 -> 198.28.0.2:53 1 64 1 2025-10-19 05:32:45.575 00:00:00.000 UDP 28.104.0.1:38906 -> 198.28.0.2:53 1 64 1 2025-10-19 05:32:45.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38906 1 80 1 2025-10-19 05:32:45.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50480 1 109 1 2025-10-19 05:29:23.813 00:05:10.046 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2900 1 2025-10-19 05:33:45.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60771 1 80 1 2025-10-19 05:33:45.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58578 1 109 1 2025-10-19 05:33:45.881 00:00:00.000 UDP 28.104.0.1:58578 -> 198.28.0.2:53 1 64 1 2025-10-19 05:33:45.880 00:00:00.000 UDP 28.104.0.1:60771 -> 198.28.0.2:53 1 64 1 2025-10-19 05:32:53.559 00:01:00.053 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:31:53.347 00:02:00.212 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:29:53.556 00:05:50.967 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:34:46.183 00:00:00.000 UDP 28.104.0.1:50689 -> 198.28.0.2:53 1 64 1 2025-10-19 05:34:46.183 00:00:00.000 UDP 28.104.0.1:57527 -> 198.28.0.2:53 1 64 1 2025-10-19 05:34:44.287 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:34:46.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50689 1 109 1 2025-10-19 05:34:46.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57527 1 80 1 2025-10-19 05:35:46.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45160 1 80 1 2025-10-19 05:35:46.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45857 1 109 1 2025-10-19 05:35:46.471 00:00:00.000 UDP 28.104.0.1:45160 -> 198.28.0.2:53 1 64 1 2025-10-19 05:30:53.495 00:05:51.068 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:35:46.471 00:00:00.000 UDP 28.104.0.1:45857 -> 198.28.0.2:53 1 64 1 2025-10-19 05:34:53.348 00:01:00.211 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:34:53.560 00:01:00.053 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:36:46.761 00:00:00.000 UDP 28.104.0.1:34865 -> 198.28.0.2:53 1 64 1 2025-10-19 05:36:46.761 00:00:00.000 UDP 28.104.0.1:47292 -> 198.28.0.2:53 1 64 1 2025-10-19 05:31:53.569 00:05:50.947 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:36:46.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34865 1 109 1 2025-10-19 05:36:46.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47292 1 80 1 2025-10-19 05:36:53.559 00:00:00.054 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:32:53.505 00:05:51.010 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:37:47.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36197 1 80 1 2025-10-19 05:37:47.028 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58188 1 109 1 2025-10-19 05:37:47.012 00:00:00.000 UDP 28.104.0.1:36197 -> 198.28.0.2:53 1 64 1 2025-10-19 05:37:47.018 00:00:00.000 UDP 28.104.0.1:58188 -> 198.28.0.2:53 1 64 1 2025-10-19 05:38:47.309 00:00:00.000 UDP 28.104.0.1:48919 -> 198.28.0.2:53 1 64 1 2025-10-19 05:38:47.308 00:00:00.000 UDP 28.104.0.1:44407 -> 198.28.0.2:53 1 64 1 2025-10-19 05:38:47.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44407 1 80 1 2025-10-19 05:38:47.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48919 1 109 1 2025-10-19 05:37:53.559 00:01:00.054 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:36:53.349 00:02:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:34:43.817 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-10-19 05:39:47.627 00:00:00.000 UDP 28.104.0.1:33827 -> 198.28.0.2:53 1 64 1 2025-10-19 05:39:47.627 00:00:00.000 UDP 28.104.0.1:51257 -> 198.28.0.2:53 1 64 1 2025-10-19 05:39:47.638 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51257 1 80 1 2025-10-19 05:39:44.305 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:39:47.638 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33827 1 109 1 2025-10-19 05:35:53.559 00:05:50.967 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:40:47.927 00:00:00.000 UDP 28.104.0.1:38179 -> 198.28.0.2:53 1 64 1 2025-10-19 05:40:47.927 00:00:00.000 UDP 28.104.0.1:54678 -> 198.28.0.2:53 1 64 1 2025-10-19 05:40:47.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38179 1 80 1 2025-10-19 05:40:47.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54678 1 109 1 2025-10-19 05:39:53.353 00:01:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:39:53.560 00:01:00.054 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:41:48.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39266 1 80 1 2025-10-19 05:41:48.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51960 1 109 1 2025-10-19 05:36:53.499 00:05:51.067 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:41:48.231 00:00:00.000 UDP 28.104.0.1:51960 -> 198.28.0.2:53 1 64 1 2025-10-19 05:41:48.231 00:00:00.000 UDP 28.104.0.1:39266 -> 198.28.0.2:53 1 64 1 2025-10-19 05:41:53.560 00:00:00.053 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:37:53.571 00:05:50.946 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:42:49.569 00:00:00.000 UDP 28.104.0.1:43435 -> 198.28.0.2:53 1 64 1 2025-10-19 05:42:49.569 00:00:00.000 UDP 28.104.0.1:60443 -> 198.28.0.2:53 1 64 1 2025-10-19 05:42:49.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60443 1 80 1 2025-10-19 05:42:49.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43435 1 109 1 2025-10-19 05:38:53.509 00:05:51.007 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:43:49.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57915 1 109 1 2025-10-19 05:43:49.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55100 1 80 1 2025-10-19 05:42:53.560 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:43:49.860 00:00:00.000 UDP 28.104.0.1:57915 -> 198.28.0.2:53 1 64 1 2025-10-19 05:41:53.352 00:02:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:43:49.860 00:00:00.000 UDP 28.104.0.1:55100 -> 198.28.0.2:53 1 64 1 2025-10-19 05:40:03.826 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2660 1 2025-10-19 05:44:44.383 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:44:50.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34561 1 109 1 2025-10-19 05:44:50.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51090 1 80 1 2025-10-19 05:44:50.173 00:00:00.000 UDP 28.104.0.1:51090 -> 198.28.0.2:53 1 64 1 2025-10-19 05:44:50.173 00:00:00.000 UDP 28.104.0.1:34561 -> 198.28.0.2:53 1 64 1 2025-10-19 05:45:50.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34832 1 109 1 2025-10-19 05:45:50.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56275 1 80 1 2025-10-19 05:45:50.464 00:00:00.000 UDP 28.104.0.1:56275 -> 198.28.0.2:53 1 64 1 2025-10-19 05:44:53.560 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:45:50.464 00:00:00.000 UDP 28.104.0.1:34832 -> 198.28.0.2:53 1 64 1 2025-10-19 05:44:53.353 00:01:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:41:53.560 00:05:50.966 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:46:50.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52727 1 109 1 2025-10-19 05:46:50.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39935 1 80 1 2025-10-19 05:46:50.816 00:00:00.000 UDP 28.104.0.1:52727 -> 198.28.0.2:53 1 64 1 2025-10-19 05:46:53.561 00:00:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 05:46:50.816 00:00:00.000 UDP 28.104.0.1:39935 -> 198.28.0.2:53 1 64 1 2025-10-19 05:42:53.500 00:05:51.067 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:47:51.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48368 1 80 1 2025-10-19 05:47:51.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44580 1 109 1 2025-10-19 05:47:51.112 00:00:00.000 UDP 28.104.0.1:48368 -> 198.28.0.2:53 1 64 1 2025-10-19 05:47:51.112 00:00:00.000 UDP 28.104.0.1:44580 -> 198.28.0.2:53 1 64 1 2025-10-19 05:43:53.571 00:05:50.945 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:48:51.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51963 1 80 1 2025-10-19 05:48:51.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53504 1 109 1 2025-10-19 05:47:53.562 00:01:00.054 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:48:51.402 00:00:00.000 UDP 28.104.0.1:53504 -> 198.28.0.2:53 1 64 1 2025-10-19 05:46:53.358 00:02:00.204 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 05:48:51.402 00:00:00.000 UDP 28.104.0.1:51963 -> 198.28.0.2:53 1 64 1 2025-10-19 05:45:23.833 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-10-19 05:44:53.510 00:05:51.007 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:49:44.545 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:49:51.698 00:00:00.000 UDP 28.104.0.1:55451 -> 198.28.0.2:53 1 64 1 2025-10-19 05:49:51.698 00:00:00.000 UDP 28.104.0.1:59556 -> 198.28.0.2:53 1 64 1 2025-10-19 05:49:51.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55451 1 80 1 2025-10-19 05:49:51.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59556 1 109 1 2025-10-19 05:49:53.562 00:01:00.054 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:50:51.986 00:00:00.000 UDP 28.104.0.1:37365 -> 198.28.0.2:53 1 64 1 2025-10-19 05:49:53.357 00:01:00.205 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:50:51.986 00:00:00.000 UDP 28.104.0.1:47148 -> 198.28.0.2:53 1 64 1 2025-10-19 05:50:51.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37365 1 109 1 2025-10-19 05:50:51.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47148 1 80 1 2025-10-19 05:51:52.280 00:00:00.000 UDP 28.104.0.1:43701 -> 198.28.0.2:53 1 64 1 2025-10-19 05:51:52.280 00:00:00.000 UDP 28.104.0.1:53850 -> 198.28.0.2:53 1 64 1 2025-10-19 05:51:52.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53850 1 109 1 2025-10-19 05:51:52.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43701 1 80 1 2025-10-19 05:52:52.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46981 1 80 1 2025-10-19 05:52:52.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44865 1 109 1 2025-10-19 05:47:53.561 00:05:50.966 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:52:52.574 00:00:00.000 UDP 28.104.0.1:44865 -> 198.28.0.2:53 1 64 1 2025-10-19 05:52:52.574 00:00:00.000 UDP 28.104.0.1:46981 -> 198.28.0.2:53 1 64 1 2025-10-19 05:48:53.508 00:05:51.059 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 05:51:53.562 00:02:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 05:53:52.874 00:00:00.000 UDP 28.104.0.1:34954 -> 198.28.0.2:53 1 64 1 2025-10-19 05:53:52.874 00:00:00.000 UDP 28.104.0.1:59884 -> 198.28.0.2:53 1 64 1 2025-10-19 05:53:52.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59884 1 80 1 2025-10-19 05:53:52.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34954 1 109 1 2025-10-19 05:54:44.326 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 05:49:53.572 00:05:50.946 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 05:54:53.184 00:00:00.000 UDP 28.104.0.1:54828 -> 198.28.0.2:53 1 64 1 2025-10-19 05:54:53.184 00:00:00.000 UDP 28.104.0.1:42855 -> 198.28.0.2:53 1 64 1 2025-10-19 05:54:53.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54828 1 109 1 2025-10-19 05:54:53.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42855 1 80 1 2025-10-19 05:50:43.844 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-19 05:50:53.521 00:05:50.998 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 05:54:53.562 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 05:51:53.359 00:04:00.203 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 05:55:53.438 00:00:00.000 UDP 28.104.0.1:35226 -> 198.28.0.2:53 1 64 1 2025-10-19 05:55:53.438 00:00:00.000 UDP 28.104.0.1:47482 -> 198.28.0.2:53 1 64 1 2025-10-19 05:55:53.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35226 1 80 1 2025-10-19 05:55:53.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47482 1 109 1 2025-10-19 05:56:53.736 00:00:00.000 UDP 28.104.0.1:40304 -> 198.28.0.2:53 1 64 1 2025-10-19 05:56:53.736 00:00:00.000 UDP 28.104.0.1:50179 -> 198.28.0.2:53 1 64 1 2025-10-19 05:56:53.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40304 1 80 1 2025-10-19 05:56:53.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50179 1 109 1 2025-10-19 05:56:53.360 00:01:00.203 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 05:57:53.993 00:00:00.000 UDP 28.104.0.1:57584 -> 198.28.0.2:53 1 64 1 2025-10-19 05:57:53.993 00:00:00.000 UDP 28.104.0.1:37922 -> 198.28.0.2:53 1 64 1 2025-10-19 05:57:54.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37922 1 109 1 2025-10-19 05:57:54.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57584 1 80 1 2025-10-19 05:53:53.563 00:05:50.966 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 05:56:53.562 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 Summary: total flows: 352, total bytes: 94052, total packets: 1388, avg bps: 193, avg pps: 0, avg bpp: 67 Time window: 2025-10-19 04:54:53 - 2025-10-19 05:59:44 Total flows processed: 352, passed: 352, Blocks skipped: 0, Bytes read: 36672 Sys: 0.0042s User: 0.0042s Wall: 0.0048s flows/second: 72829.3 Runtime: 0.0049s